AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
3min chapter
Search Engine Vulnerabilities, Ghost Tokens, Anna Kournikova
Hacker And The Fed
Google's Ghost Token Attack
An attacker could get an application accepted. Probably changes its capabilities or exactly what the application does. Attackers would then immediately re-hide the application from the victim once it got access to a new access token. To maintain persistence, the attack loop must be executed periodically before the pending deletion project is purged.
00:00
Transcript
Episode notes
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode